Cookie policy

Two storage keys are ours. Every cookie on the list after them belongs to an ad or analytics platform and waits for you to press Allow.

Our bicycle parts catalog needs very little in your browser to work. Every catalogue page and the chain calculator run without a single cookie. This page lists every key that can appear, who writes it and the clock it runs on.

Last updated 7 October 2026 · Read with the privacy policy

When this notice applies

This notice took effect on 7 October 2026. It covers xervilo.com and every page under it, including the chat widget that opens from the corner of each page. If a key is added or removed, this page changes first and the date above moves with it.

Three categories, one of them always on

Strictly necessary. Two browser storage keys. One remembers whether you allowed or declined cookies, so the bar does not ask on every page. The other holds the token for an open chat thread so a reply from the desk is still there when you come back. Neither tracks you across other sites, and neither can be switched off without breaking the thing it does.

Analytics. Google's measurement cookies, which count visits and pages read. We use them to see whether people find the tyres and tubes page or give up on the catalogue. Off by default.

Advertising. Cookies from Google Ads, Microsoft Advertising and Meta that record which ad brought you here and whether you later sent an inquiry. Off by default.

Every cookie and storage key

Lifetimes are the maximum. Clearing your browser removes all of them sooner.

Cookies and storage keys on xervilo.com
Name	Set by	Purpose	Lasts
`site_consent_v2`	Xervilo	Your Allow or Decline answer (localStorage)	6 months
Chat token	Xervilo	Reopens your chat thread (localStorage)	6 months, or until cleared
`_gcl_au`	Google Ads	Stores the gclid to link an inquiry to an ad click	90 days
`_ga`	Google Analytics	Distinguishes visitors for counts	2 years
`_ga_<id>`	Google Analytics	Keeps session state	2 years
`_uetsid`	Microsoft Advertising	Session ID for UET conversion tracking	1 day
`_uetvid`	Microsoft Advertising	Visitor ID for UET conversion tracking	13 months
`_uetmsclkid`	Microsoft Advertising	Stores the msclkid from the ad link	90 days
`MUID`	Microsoft	Identifies the browser across Microsoft sites	13 months
`_fbp`	Meta	Browser ID for Meta Ads measurement	90 days
`_fbc`	Meta	Stores the fbclid from the ad link	90 days

The click identifiers in your address bar

We buy ads. Someone searching "700x28c road tires" or "presta inner tubes 700c" may click one and land on a page here. Each platform adds a tag to that link before you arrive:

gclid from Google Ads
msclkid from Microsoft Advertising
fbclid from Meta Ads, where a campaign runs there

The tag is visible in the URL no matter what you choose. Our page only copies it into a cookie, and only reports a later inquiry back to the platform, if you have allowed advertising storage.

Consent Mode v2, signal by signal

Google's consent mode is a set of four switches the page sends before any tag fires. On this site every one of them starts at denied:

ad_storage: may an ad cookie be written
ad_user_data: may user data be sent to Google for ads
ad_personalization: may it be used for personalised ads
analytics_storage: may an analytics cookie be written

Allow sets all four to granted. Decline keeps them denied. Withdrawing later sets them back to denied immediately, on the same page, with no reload needed. Microsoft's UET tag reads the same choice.

Giving, changing or taking back consent

The bar at the bottom of the screen asks once. It does not block the page; you can browse the drivetrain tables with it still open. Allow and Decline carry equal weight and sit side by side.

To change your mind, use Cookie settings in the footer of any page. It reopens the same bar. Pick the other button and the change applies at once. Clearing your browser's site data also resets it, and the bar returns on your next visit.

If you decline

Everything that matters still works. You can browse all seven part groups, run the chain length calculator, send an inquiry and use the chat. We still answer by email or phone within our usual reply target.

What stops: no analytics or advertising cookie is written, the click ID is not stored, and no conversion is reported to Google, Microsoft or Meta. You may still see our ads elsewhere, because the platforms decide who sees an ad. They just will not learn from this site that you visited.

A browser sending Global Privacy Control is treated as a decline from the start.

Still stored site_consent_v2, so we remember the no.

The platforms' own documents

Each platform explains its cookies in its own words. We cannot change those pages and do not summarise them beyond what is above.

Google: policies.google.com/privacy and policies.google.com/technologies/cookies
Microsoft: privacy.microsoft.com/privacystatement
Meta: facebook.com/privacy/policies/cookies

Asking about a specific cookie

Found a key in your browser that is not in the table? Send us its name and the page you saw it on. Email [email protected], call +1 (565) 555-2353, or write to 68 Cedar Court, Office 12, Austin, Texas 28613. To have data deleted rather than explained, use the data request page.